sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-05-20	Remove unneeded parameter of setup_child and namespace it	Jakub Hrozek	1	-1/+1
	setup_child() was accepting a parameter it didn't use. Also the function name was too generic, so I added a sdap prefix.
2013-05-07	AD: read flat name and SID of the AD domain	Sumit Bose	1	-0/+31
	For various features either the flat/short/NetBIOS domain name or the domain SID is needed. Since the responders already try to do a subdomain lookup when and known domain name is encountered I added a subdomain lookup to the AD provider which currently only reads the SID from the base DN and the NetBIOS name from a reply of a LDAP ping. The results are written to the cache to have them available even if SSSD is started in offline mode. Looking up trusted domains can be added later. Since all the needed responder code is already available from the corresponding work for the IPA provider this patch fixes https://fedorahosted.org/sssd/ticket/1468
2013-05-03	AD: Always initialize ID mapping	Jakub Hrozek	1	-5/+3
	Because we now always store SIDs in the LDAP provider, we also need to always initialize the ID mapping context even if ID mapping itself is off.
2013-05-03	Active Directory dynamic DNS updates	Jakub Hrozek	1	-0/+8
	https://fedorahosted.org/sssd/ticket/1504 Implements dynamic DNS updates for the AD provider. By default, the updates also update the reverse zone and run periodically every 24 hours.
2013-05-02	DNS sites support - add AD SRV plugin	Pavel Březina	1	-5/+25
	https://fedorahosted.org/sssd/ticket/1032
2013-04-10	DNS sites support - use SRV DNS lookup plugin in all providers	Pavel Březina	1	-0/+10
	https://fedorahosted.org/sssd/ticket/1032 We set a plugin during an initialization of ID provider, which is an authoritative provider for a plugin choice. The plugin is set only once. When other provider is initalized (e.g. id = IPA, sudo = LDAP), we do not overwrite the plugin. Since sssm_*_id_init() is called from all module constructors, this patch relies on the fact, that ID provider is initialized before all other providers.
2012-08-23	AD context was set to null due to type mismatch	Ondrej Kos	1	-1/+1

2012-08-01	Primary server support: new option in AD provider	Jan Zeleny	1	-1/+3
	This patch adds support for new config option ad_backup_server. The description of this option's functionality is included in man page in one of previous patches.
2012-08-01	Primary server support: AD adaptation	Jan Zeleny	1	-1/+1
	This patch adds support for the primary server functionality into AD provider. No backup servers are added at the moment, just the basic support is in place.
2012-07-06	AD: Add AD access-control provider	Stephen Gallagher	1	-0/+56
	This patch adds support for checking whether a user is expired or disabled in AD.
2012-07-06	AD: Add AD auth and chpass providers	Stephen Gallagher	1	-0/+85
	These new providers take advantage of existing code for the KRB5 provider, providing sensible defaults for operating against an Active Directory 2008 R2 or later server.
2012-07-06	AD: Add AD identity provider	Stephen Gallagher	1	-0/+184
	This new identity provider takes advantage of existing code for the LDAP provider, but provides sensible defaults for operating against an Active Directory 2008 R2 or later server.